CVE-2016-7033
CVE-2016-7033 is a stored XSS flaw in dashbuilder within Red Hat JBoss BPM Suite and JBoss BRMS 6.x. The Red Hat advisory RHSA-2017:0249 states the issue is caused by improper sanitization in dashbuilder, enabling remote, authenticated attackers with dashbuilder access (usually admins) to store s...